Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
ac75a79c by Salvatore Bonaccorso at 2021-09-07T22:27:56+02:00
Add CVE-2021-38698/consul
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -4436,7 +4436,8 @@ CVE-2021-38700
CVE-2021-38699 (TastyIgniter 3.0.7 allows XSS via /account, /reservation,
/admin/dashb ...)
NOT-FOR-US: TastyIgniter
CVE-2021-38698 (HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply
endpoint allow ...)
- TODO: check
+ - consul <unfixed>
+ NOTE:
https://discuss.hashicorp.com/t/hcsec-2021-24-consul-missing-authorization-check-on-txn-apply-endpoint/29026
CVE-2021-38697
RESERVED
CVE-2021-38696
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ac75a79c4f2803ac504d50ce9a5397fa4440ddc5
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ac75a79c4f2803ac504d50ce9a5397fa4440ddc5
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
